Information Security Analyst

Scientific Research Corporation (SRC) is seeking a Security Analyst to support IT infrastructure security, compliance assurance, and audit remediation for United States Space Command (USSPACECOM) Redstone Transition Team projects.

The analyst will evaluate findings from prior inspections and department-level audits and determine their applicability to current headquarters transition, command and control facility, data center, and supporting infrastructure projects. Working with government security officials, project managers, project engineers, cybersecurity personnel, and installation organizations, this individual will translate findings into actionable requirements and help ensure corrective measures are incorporated into project planning, design, implementation, and acceptance.

This position bridges technical and organizational boundaries, addressing the relationships among C4IT infrastructure, cybersecurity implementation, physical security, and facility-related control systems. The successful candidate will provide clear analysis, practical recommendations, and documented evidence to support government decisions, demonstrate readiness, and reduce the recurrence of previously identified deficiencies.

• Reviewing internal inspection reports, external audit findings, assessment checklists, and supporting evidence to identify deficiencies, underlying causes, and implications for current projects
• Evaluating findings from existing USSPACECOM facilities and determining their applicability to new or transitioning facilities at Redstone Arsenal
• Translating applicable findings and mitigation recommendations into measurable security requirements, corrective actions, and acceptance criteria
• Maintaining traceability from findings to affected systems, project requirements, responsible owners, corrective actions, and verification evidence
• Reviewing cybersecurity implementation documentation, policies, procedures, guidelines, equipment records, and supporting compliance artifacts for completeness and consistency
• Identifying gaps between documented requirements, planned designs, implemented controls, and operational practices
• Coordinating with project engineers to incorporate security requirements into designs, statements of work, installation plans, test procedures, and project milestones
• Assessing the interfaces among IT infrastructure, physical security measures, and facility-related control systems, including environmental monitoring, building controls, power protection, and utility monitoring
• Coordinating with government cybersecurity and facility personnel to identify system boundaries, ownership, connectivity, access controls, monitoring responsibilities, and supporting documentation
• Working with the Directorate of Public Works, installation communications and IT organizations, construction teams, and other supporting activities to resolve requirements and implementation dependencies
• Developing and maintaining corrective action plans and plans of action and milestones, including priorities, owners, schedules, dependencies, and closure criteria
• Evaluating proposed mitigations for effectiveness and identifying residual risks requiring government review or acceptance
• Supporting site reviews, inspections, and verification activities to confirm corrective measures are implemented and supported by adequate evidence
• Participating in change control boards to assess security and compliance impacts of proposed changes and track resulting actions
• Coordinating with command and supporting organizations to resolve conflicting interpretations, clarify responsibilities, and obtain authoritative decisions
• Preparing detailed assessment reports and executive summaries that explain findings, project impacts, recommended actions, and decisions required
• Maintaining organized, appropriately protected repositories of inspection records, requirements, decisions, corrective actions, and verification evidence
• Identifying recurring deficiencies and recommending improvements to checklists, procedures, design reviews, and project acceptance practices
• Supporting government-led inspection preparation, audit responses, and related security assurance activities

FILLING THIS POSITION IS CONTINGENT UPON FUNDING

• At least five years of relevant experience supporting DoD or federal IT security, infrastructure compliance, security assessments, or audit remediation
• Experience interpreting inspection or audit findings and translating them into actionable technical or procedural requirements
• Experience developing corrective action plans, tracking remediation, and assembling evidence to support closure
• Working knowledge of cybersecurity controls, physical security considerations, and their application to enterprise IT infrastructure
• Ability to review technical documentation, system inventories, diagrams, implementation records, policies, and procedures to identify gaps and inconsistencies
• Experience coordinating corrective actions across technical teams, security personnel, facility organizations, and government stakeholders
• Ability to assess whether proposed corrective measures address the underlying deficiency and define how their implementation will be verified
• Strong analytical, technical writing, reporting, and stakeholder coordination skills
• Ability to manage multiple concurrent efforts and maintain traceability among findings, requirements, actions, and supporting evidence

• Experience supporting department-level inspections or audits involving C4IT infrastructure, cybersecurity, or physical security
• Experience applying lessons learned from existing facilities to new construction, modernization, or headquarters transition projects
• Familiarity with facility-related control systems and operational technology, including building automation, environmental monitoring, utility monitoring, and uninterruptible power systems
• Familiarity with Risk Management Framework documentation, security control implementation evidence, configuration management, and continuous monitoring practices
• Experience reviewing facility designs, network diagrams, equipment inventories, and construction or installation documentation
• Experience coordinating with installation public works, communications and IT service organizations, construction contractors, or the U.S. Army Corps of Engineers
• Experience participating in change control boards and evaluating security impacts of engineering or infrastructure changes
• Experience with Microsoft Teams, SharePoint, Excel, and tools supporting compliance tracking, dashboards, and workflow management
• Relevant cybersecurity, information assurance, physical security, or audit certifications
• Bachelor’s degree in cybersecurity, information technology, engineering, security management, or a related field

SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET / SCI ELIGIBILITY

• Up to 15 percent

Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.

SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment.

All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.

Scientific Research Corporation endeavors to make www.scires.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact jobs@scires.com for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.